Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/0fdc0497dac597ae42b8934bb7db3da9128402de.roa
File:                     0fdc0497dac597ae42b8934bb7db3da9128402de.roa (raw, json)
Hash identifier:          5EjMdR4+WwxkI9H7AawIk66YlH0SsQNWuKqImzw6rkw=
Subject key identifier:   57:0C:56:C6:67:16:70:EA:E0:57:98:20:30:23:C3:A8:82:3B:D3:3D
Certificate issuer:       /CN=65c204767f404590bc5cf1ab5b3449ef14940fd0
Certificate serial:       2B27FD
Authority key identifier: 2B:02:56:AA:9A:85:82:6B:BE:11:87:5E:57:72:BB:0B:00:D5:70:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65c204767f404590bc5cf1ab5b3449ef14940fd0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/0fdc0497dac597ae42b8934bb7db3da9128402de.roa
Signing time:             Thu 15 Feb 2024 21:18:36 +0000
ROA not before:           Thu 15 Feb 2024 21:18:29 +0000
ROA not after:            Thu 15 Feb 2029 21:18:29 +0000
asID:                     28002
IP address blocks:        2001:13c7:7003::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2828285 (0x2b27fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65c204767f404590bc5cf1ab5b3449ef14940fd0
        Validity
            Not Before: Feb 15 21:18:29 2024 GMT
            Not After : Feb 15 21:18:29 2029 GMT
        Subject: CN=0fdc0497dac597ae42b8934bb7db3da9128402de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8b:8d:56:de:b4:4c:f2:77:e3:c7:47:79:30:
                    78:b4:3a:55:2b:b8:8f:05:82:a4:05:d2:e2:ac:59:
                    81:93:a8:be:2b:23:b1:d5:ff:ec:5b:53:17:10:07:
                    6f:aa:9d:2d:d9:72:2d:b9:64:0f:19:37:03:69:13:
                    ad:76:96:5b:6e:60:a4:1b:d0:7d:56:b1:9e:de:a3:
                    77:b5:83:c1:05:89:60:76:bf:75:fa:b6:9c:de:1f:
                    56:b1:e4:76:f0:3f:4e:35:b3:13:45:31:4d:bd:87:
                    8b:b8:e4:66:d4:14:74:bb:95:dd:8d:e6:cf:e7:1c:
                    e1:7c:97:ca:a5:9e:85:7f:c4:42:2c:9e:06:9e:34:
                    83:08:71:c7:79:06:fb:7f:a9:70:37:72:0b:0a:4e:
                    43:2b:3b:0b:5a:7e:c4:73:1b:5b:38:97:7b:59:7f:
                    67:fc:cc:91:2d:9f:b4:0e:8b:15:cb:a1:d4:7a:09:
                    cd:47:04:87:cd:04:75:dc:96:15:ec:56:fa:78:99:
                    62:88:ec:aa:96:63:df:8a:6a:31:68:a5:11:2c:d9:
                    05:a5:11:bb:3c:2a:b0:4f:aa:4a:25:0d:13:c0:f1:
                    f8:3d:bf:10:eb:bb:65:83:13:29:c2:15:48:14:b3:
                    31:81:be:b4:be:b9:91:85:46:15:98:ee:b0:f3:58:
                    f0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0C:56:C6:67:16:70:EA:E0:57:98:20:30:23:C3:A8:82:3B:D3:3D
            X509v3 Authority Key Identifier:
                keyid:2B:02:56:AA:9A:85:82:6B:BE:11:87:5E:57:72:BB:0B:00:D5:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65c204767f404590bc5cf1ab5b3449ef14940fd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/0fdc0497dac597ae42b8934bb7db3da9128402de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/65c204767f404590bc5cf1ab5b3449ef14940fd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7003::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:f0:88:c9:8b:3e:2f:bf:6e:c9:a6:fd:4d:73:de:84:6e:15:
         d7:e0:f8:c9:c3:16:cf:55:80:16:73:05:b5:da:e0:c3:f1:c4:
         e4:ee:29:dd:66:50:d7:6a:ac:0c:96:e5:c2:1f:f6:15:da:a3:
         2e:cf:b6:29:b1:f1:78:1a:99:73:38:84:0b:4e:a8:c2:79:79:
         1b:cb:42:c2:1e:8e:ce:90:0c:c7:4e:a5:e3:1d:c4:69:4c:17:
         d3:99:4b:c8:47:9d:bc:3a:e6:03:76:71:f6:25:bd:07:50:19:
         c2:aa:cc:18:ac:a4:87:24:09:bf:33:eb:6b:01:ef:b2:ed:cd:
         3d:46:79:73:c5:cb:48:df:b1:72:ea:1f:5c:2d:9d:fa:65:ec:
         37:51:ea:e7:e5:f1:07:41:c5:ca:84:ea:43:d4:d2:d3:6d:db:
         95:83:a1:53:c6:f9:50:5b:5b:2f:92:61:ad:e0:3e:26:4a:dd:
         c1:8d:a5:d8:f1:b4:20:ae:86:4b:0d:1b:29:ff:c0:c1:3d:62:
         b0:92:6b:ef:be:ae:e2:6d:65:25:77:28:bf:f7:46:8f:5f:56:
         24:92:b9:39:35:c9:c3:23:6d:04:f4:52:50:eb:55:b6:3e:bc:
         37:f8:3a:9c:31:9f:30:62:ab:b9:f3:88:fc:03:8d:61:b5:b7:
         e5:62:f6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----